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IN THE CLAIMS: 

Please amend the claims as follows: 

1. (Currently Amended) A method, comprising: 

sending an access-request signal comprising a well-known uniform resource 
locator to a network by a terminal for connecting to a help-portal server of said 
network and for requesting a provisioning signal or a management session signal for 
configuring the terminal; 

receiving by the terminal, in response to said sending the access-request 
signal, an identity of said help-portal server using a chain of trust comprising at least 
two consecutive exchanges of information between trusted elements of the network 
and the terminal; and 

re-sending, in response to said identifying receiving said identity of said help-portal 
server , asaid access- request signal to the help-portal server by the terminal with a 
request to provide the provisioning signal or the management session signal to the 
terminal, wherein, after being configured using the provisioning signal or the 
management session signal, the terminal is enabled for handling data-protocol 
services and dynamically configured for the data-protocol services specific to a 
service provider in a secure way based on said chain of trust so as to be able to 
connect said terminal to an BP backbone network via a network, which provides said 
data-protocol services and which is provided by said service provide r wherein 
identifying said help-portal server comprises: 

identifying to the terminal a trusted access point node name by a trusted 
home location register of the network; 

re-sending the access-request signal to the trusted access point node by the 
terminal; 

identifying to the terminal a trusted domain name service server of the 
network by the trusted access point node; 

re-sending said access-request signal by the terminal to the trusted domain 
name service server for identifying an address mapping for the help-portal server; 
and 
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identifying said address mapping to the terminal by the trusted domain name 
service server . 

2. (Original) The method of claim 1, wherein said data-protocol services 
specific to said service provider are provided by a general packet radio service. 

3. (Previously Presented) The method of claim 1, wherein the access-request 
signal is sent by a browser user agent block of the terminal. 

4. (Previously Presented) The method of claim 1, wherein the well-known 
uniform resource locator is allowed by an access control profile of the terminal. 

5. (Previously Presented) The method of claim 1, further comprising: 
sending the provisioning signal or the management session signal to the 

terminal for configuring the terminal. 

6. (Previously Presented) The method of claim 5, wherein the provisioning 
signal is sent over an IP bearer or sent using a short message service protocol. 

7. (Previously Presented) The method of claim 6, wherein said provisioning 
signal is sent over the IP bearer using a hyper text transfer protocol or a hyper text 
transfer protocol secure. 

8. (Previously Presented) The method of claim 6, wherein said provisioning 
signal is sent over the air. 

9. (Cancelled) 

10. (Currently Amended) The method as in claim 91, wherein a security of 
configuring the terminal is ensured by means of the chain of trust built by the trusted 
home location register, by the well-known access point node name for accessing the 
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trusted access point node, by the trusted access point node, by the trusted domain 
name service server and by the well-known uniform resource locator. 

1 1 . (Previously Presented) The method of claim 1 , wherein after said sending the 
request signal to the help-portal server, the method further comprises: 

sending a user authentication request signal to an authentication block of the 
network or to the terminal or to both, the authentication block and the terminal, 
respectively, by the help-portal server, and a receiving authentication confirmation 
signal back from the authentication block or from the terminal, respectively, or from 
both, the authentication block and the terminal; and 

determining if the terminal is authentic by the help-portal server based on the 
authentication confirmation signals. 

12. (Previously Presented) The method of claim 1, wherein said access-request 
signal contains user identification information, a generic uniform resource locator 
request for the help-portal server or for the help-portal server and a device 
management server, and a well-known access point node name for accessing the 
trusted access point node or a wildcard access point node. 

13. (Previously Presented) The method of claim 11, wherein if it is determined 
that the terminal is authentic, the method further comprises: 

sending a triggering signal to a provisioning server by the help-portal server; 

and 

sending a provisioning signal by the provisioning server to the terminal and 
so configuring said terminal. 

14. (Cancelled) 

15. (Previously Presented) The method of claim 1 1, wherein if it is determined 
that the terminal is authentic, the method further comprises the: 

sending an initial provisioning triggering signal to a device management 
server for initial provisioning; and 
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sending a further triggering signal by the help-portal server to an 
initialization content handler of the terminal, said further triggering signal 
containing a proxy address and a password for connecting to the device management 
server. 

16. (Previously Presented) The method of claim 15, further comprising: 
determining if the further triggering signal contains an instruction of making 

a connection to the device management server by the terminal. 

17. (Previously Presented) The method of claim 16, wherein if the further 
triggering signal contains the instruction for making the connection to the device 
management server by the terminal, the method further comprises: 

sending a start signal to a device management agent block of the terminal by 
the initialization content handler block; 

sending a further access-request signal containing a network access 
authentication to the device development server by the device management agent 
block; and 

sending the management session signal by the device development server to 
the terminal for further configuring the terminal. 

18. (Previously Presented) The method of claim 1, wherein before sending the 
access-request signal to the network, the method further comprises: 

starting a browser user agent by a starting signal. 

19. (Currently Amended) A cellular communication system, comprising: 

a terminal, enabled for handling data-protocol services and dynamically 
configured for the data-protocol services specific to a service provider in a secure 
way based on a chain of trust, responsive to a provisioning signal or to a 
management session signal for configuring the terminal, for sending an access- 
request signal comprising a well-known uniform resource locator for connecting to a 
help-portal server, for re-sending, in response to identifying said help-portal server, 



Docket No. 944-004.042 
Serial No. 10/757,560 



a said access— request signal to the help-portal server with a request to provide the 
provisioning signal or the management session signal to the terminal; and 

a network provided by said service provider and comprising said help-portal 
server, responsive to the access-request signal, for providing the data-protocol 
services specific to the service provider, for said identifying, in response to said 
sending the access-request signal, said help-portal server to said terminal using said 
chain of trust comprising at least two consecutive exchanges of information between 
trusted elements of the network and the terminal, for providing the provisioning 
signal or the management session signal to the terminal to perform said configuring 
and for enabling after said configuring a connection of said terminal to an IP 
backbone network via the networ k, wherein said help-portal server of said network 
is responsive to the request signal and to one or both authentication confirmation 
signals, for providing a triggering signal, or an initial provisioning triggering signal 
and a further triggering signal; said network further comprises: 

a trusted domain name service server, responsive to the access-request signal 
from the terminal, for identifying to the terminal an address mapping for the help- 
portal server; 

a trusted access point node, responsive to the access-request signal, for 
providing to the terminal the trusted domain name service server; 

a trusted home location register, responsive to the access-request signal, for 
providing the trusted access point node to the terminal; and optionally 

an authentication block, responsive to an authentication request signal, for 
providing the one authentication confirmation signal to the help-portal server . 

20. (Previously Presented) The cellular communication system of claim 19, 
wherein the well-known uniform resource locator is allowed by an access control 
profile of the terminal. 

21. (Previously Presented) The cellular communication system of claim 19, 
wherein said data-protocol services specific to said service provider are provided by 
a general packet radio service. 
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22. (Previously Presented) The cellular communication system of claim 19, 
wherein the terminal comprises: 

a browser user agent block, responsive to a starting signal, for providing the 
access-request signal to the network. 

23. (Cancelled) 

24. (Currently Amended) The cellular communication system of claim £319, 
wherein a security of configuring the terminal is ensured by means of the chain of 
trust built by the trusted home location register, by the well-known access point 
node name for accessing the trusted access point node, and further built by the 
trusted access point node, by the trusted domain name service server and by the 
well-known uniform resource locator. 

25. (Previously Presented) The cellular communication system of claim 19, 
wherein said access-request signal contains user identification information, a generic 
uniform resource locator request for the help-portal server or for the help-portal 
server and a device management server, and a well-known access point node name 
for accessing the trusted access point node or a wildcard access point node. 

26. (Currently Amended) The cellular communication system of claim 3319, 
wherein the network further comprises: 

a provisioning server, responsive to the triggering signal by the help-portal 
server, for providing the provisioning signal to the terminal. 

27 (Cancelled) 

28. (Currently Amended) The cellular communication system of claim 2319, 
wherein the network further comprises: 

a device management server, responsive to said initial provisioning signal, to 
a further access-request signal containing a network access authentication provided 
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by the terminal in response to said further triggering signal, for providing the 
management session signal to the terminal for configuring the terminal. 

29. (Previously Presented) The cellular communication system of claim 28, 
wherein the terminal further comprises: 

an initialization content handler, responsive to the further triggering signal 
containing a proxy address and a password for connecting to the device management 
server, for providing a start signal; and 

a device management agent block, responsive to the start signal, for 
providing the further access-request signal. 

30. (Previously Presented) The cellular communication system of claim 19, 
wherein the provisioning signal is sent over an IP bearer or sent using a short 
message service protocol. 

31 . (Previously Presented) The cellular communication system of claim 30, 
wherein said provisioning signal is sent over the IP bearer using a hyper text transfer 
protocol or a hyper text transfer protocol secure. 

32. (Previously Presented) The cellular communication system of claim 30, 
wherein said provisioning signal is sent over the air. 

33. (Previously Presented) A computer program product comprising: a computer 
readable storage structure embodying a computer program code thereon for 
execution by a computer processor with said computer program code wherein said 
computer program code comprises instructions for performing the method of claim 
1. 

34. (Cancelled) 



35. (Cancelled) 
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36. (Currently Amended) A terminal apparatus , comprising: 

a browser user agent block, for Gendin g for sending an access-request signal 
comprising a well-known uniform resource locator to a network for connecting to a 
help-portal server of said network, for re-sending, in response to identifying said 
help-portal server, asaid access- request signal to the help-portal server with a 
request to provide the provisioning signal or the management session signal to the 
terminal, 

wherein said terminal apparatus is configured to receive an identity of said 
help-portal server using a chain of trust comprising at least two consecutive 
exchanges of information between trusted elements of the network and the browser 
user agent block, wherein said trusted elements of the network comprise a trusted 
home location register, a trusted access point node, and a trusted domain name 
service server, and 

wherein, after being configured using the provisioning signal or the 
management session signal, the terminal apparatus is enabled for handling data- 
protocol services and dynamically configured for the data-protocol services specific 
to a service provider in a secure way based on said chain of trust so as to be able to 
connect said terminal to an BP backbone network via a network, which is configured 
to provide said data-protocol services and which is provided by said service 
provide r, wherein security of configuring the terminal apparatus is ensured by the 
chain of trust built by the trusted home location register, by a well-known access 
point node name provided by the trusted home location register to the terminal 
apparatus, and further built by the trusted access point node identifying to the 
terminal the trusted domain name service server and by the trusted domain name 
service center providing a well-known uniform resource locator to the terminal for 
locating the help-portal server . 

37. (Previously Presented) The terminal of claim 36, wherein said data-protocol 
services specific to said service provider are provided by a general packet radio 
service. 

38. (Currently Amended) A network, comprising: 
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a help-portal server, for providing the data-protocol services specific to a 
service provider, responsive to ih ean access- request signal from a terminal for 
providing the provisioning signal or the management session signal to the terminal 
to perform configuring of said terminal and for enabling after said configuring a 
connection of said terminal to an IP backbone network via the network, which is 
configured to provide said data-protocol services and which is provided by said 
service provider, 

wherein, in response to a maid access-request signal comprising a well-known 
uniform resource locator for connecting to said help-portal server from a terminal, 
the network is configured to identify said help-portal server to said terminal using a 
chain of trust comprising at least two consecutive exchanges of information between 
trusted elements of the network and the terminal , wherein said trusted elements of 
the network comprise: 

a trusted home location register, responsive to the access-request signal, for 
providing the trusted access point node to the terminal. 

a trusted access point node, responsive to the access-request signal, for 
providing to the terminal the trusted domain name service server; 

a trusted domain name service server, responsive to the access-request signal 
from the terminal, for identifying to the terminal an address mapping for the help- 
portal server . 

39. (Cancelled) 

40. (Previously Presented) The network of claim 38, wherein the help-portal 
server is configured to provide an authentication request signal, and said network 
further comprises: 

an authentication block, responsive to said authentication request signal, for 
providing an authentication confirmation signal to the help-portal server. 

41. (Previously Presented) The network of claim 38, wherein the help-portal 
server is configured to provide a triggering signal in response to said request signal, 
and said network comprises: 
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a provisioning server, responsive to the triggering signal by the help-portal 
server, for providing the provisioning signal to the terminal. 

42. (New) The terminal apparatus of claim 36, wherein a security of configuring 
the terminal apparatus is ensured by means of the chain of trust built by the trusted 
home location register, by the well-known access point node name for accessing the 
trusted access point node, and further built by the trusted access point node, by the 
trusted domain name service server and by the well-known uniform resource locator. 

43. (New) The network of claim 38, wherein a security of configuring the 
terminal is ensured by means of the chain of trust built by the trusted home location 
register, by the well-known access point node name for accessing the trusted access 
point node, and further built by the trusted access point node, by the trusted domain 
name service server and by the well-known uniform resource locator. 

44. (New) User equipment apparatus, comprising: 

means for sending, in response to a starting signal from a user of said user 
equipment apparatus, an access request signal to a trusted home location register or 
visitor location register of a network of a cellular radio communication system, 

means for forwarding, in response to said home location register or said 
visited location register of said network identifying a trusted access point node, said 
access request signal to said identified trusted access point, 

means for forwarding, in response to said trusted access point identifying a 
trusted domain name service server of said network, said access request signal to the 
trusted domain name service server for identifying a trusted help-portal server of 
said network, and 

means for sending, in response to said identification of said help-portal 
server, said access request signal to said trusted help-portal server, 

means for sending, in response to an authentication request signal sent from 
said trusted help-portal server, an authentication confirmation signal to said trusted 
help-portal, and 
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means for receiving a provisioning signal or a management session signal 
sent to said user equipment apparatus from said help-portal server so as to provide a 
trusted service activation to said user equipment apparatus via said network. 
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